MyBB Community Forums

How do you fix the avatar vulnerability?

can you provide more details - what exactly is avatar vulnerability ?

I guess he means the ability to get IP from an external image. But people need to understand it's the way internet works and you can't fix it: http://en.wikipedia.org/wiki/Web_bug Except for disabling usage of external images, of course.

(2015-05-31, 12:34 PM)Destroy666 Wrote: [ -> ]I guess he means the ability to get IP from an external image. But people need to understand it's the way internet works and you can't fix it: http://en.wikipedia.org/wiki/Web_bug Except for disabling usage of external images, of course.

How do you do that?

(2015-05-31, 06:26 PM)Enthrones Wrote: [ -> ]

(2015-05-31, 12:34 PM)Destroy666 Wrote: [ -> ]I guess he means the ability to get IP from an external image. But people need to understand it's the way internet works and you can't fix it: http://en.wikipedia.org/wiki/Web_bug Except for disabling usage of external images, of course.

How do you do that?

If I'm correct, he basically means disallowing users to upload avatars via URL.

(2015-05-31, 06:26 PM)Enthrones Wrote: [ -> ]

(2015-05-31, 12:34 PM)Destroy666 Wrote: [ -> ]I guess he means the ability to get IP from an external image. But people need to understand it's the way internet works and you can't fix it: http://en.wikipedia.org/wiki/Web_bug Except for disabling usage of external images, of course.

How do you do that?

there's a tutorial on here somewhere explaining how to do this. let me see if I can find it...

---

this is incredibly old so I don't know if it still works, but look at this: http://community.mybb.com/thread-13483-p...l#pid89448

(2015-05-31, 08:58 PM)Wires Wrote: [ -> ]

(2015-05-31, 06:26 PM)Enthrones Wrote: [ -> ]

(2015-05-31, 12:34 PM)Destroy666 Wrote: [ -> ]I guess he means the ability to get IP from an external image. But people need to understand it's the way internet works and you can't fix it: http://en.wikipedia.org/wiki/Web_bug Except for disabling usage of external images, of course.

How do you do that?

If I'm correct, he basically means disallowing users to upload avatars via URL.

Wires PM on Skype.